last executing test programs: 3.713646206s ago: executing program 2 (id=1200): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./bus\x00', 0x121081a, &(0x7f0000000c00)={[{@acl}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x1}, &(0x7f0000000240)=0x8) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 3.553478093s ago: executing program 2 (id=1203): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x22}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x5, 0x3, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 3.28814823s ago: executing program 2 (id=1208): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="a7", 0xffe0, 0x48d8, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) getpeername$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) 3.087733211s ago: executing program 2 (id=1211): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) set_mempolicy(0x6, 0x0, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x4) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f00000005c0)) 2.90444094s ago: executing program 2 (id=1214): r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000d40)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000d80)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000dc0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e40), 0x4) write(r1, &(0x7f0000000e80)='V', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000f00)={0x2, 0x4e23, @multicast2}, 0x10) 2.894293051s ago: executing program 0 (id=1215): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2f28}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x1205c0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000800)={[], [{@fowner_gt}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fc07002503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x6808) 2.689728762s ago: executing program 2 (id=1220): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) tee(r1, r2, 0x60002000000, 0x8) 2.062083437s ago: executing program 3 (id=1225): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0x1d00c, &(0x7f00000003c0)={[{@debug}, {@data_journal}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}]}, 0x3, 0x498, &(0x7f0000000500)="$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") r2 = socket(0x22, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) 1.779570856s ago: executing program 0 (id=1226): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000, 0x71, 0x10, 0x48}}, &(0x7f0000000480)='GPL\x00'}, 0x80) unlink(0x0) close(r0) socketpair(0x10, 0x2, 0x7, &(0x7f0000000200)) 1.239250882s ago: executing program 0 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) write(r0, &(0x7f0000000580)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.211799265s ago: executing program 1 (id=1228): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x40000c0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x6, &(0x7f0000000100)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x29e, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close_range(r4, 0xffffffffffffffff, 0x0) 1.021118104s ago: executing program 3 (id=1230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) close(0x3) 1.020819815s ago: executing program 4 (id=1231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/229, 0xe5}], 0x1, 0x4, 0x3) 936.624473ms ago: executing program 1 (id=1232): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x18082d, 0x0) 902.800177ms ago: executing program 4 (id=1233): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0xa96) connect$inet(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 867.77918ms ago: executing program 1 (id=1234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ec0)={0x1, &(0x7f0000000f00)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000f80)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000001040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) 862.100761ms ago: executing program 3 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 781.872339ms ago: executing program 0 (id=1236): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200002, 0x200003, 0x801, 0x5, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r1) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x21081e, &(0x7f0000000980)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f00000009c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000001400090003000000ffdbdf250500000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x0) 749.804843ms ago: executing program 1 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000780)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000800)=0xb, 0x4) setresuid(0xee00, 0xee00, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840)=0x80000004, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000880)=0x100000001, 0x4) bind$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0x40) 732.534064ms ago: executing program 3 (id=1238): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r3}, 0x10) 664.734251ms ago: executing program 1 (id=1239): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xbf9, 0x9}, 0x4, 0x1, 0xfffc, 0x6, 0xfffffffffffffffc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@nobh}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) ioprio_get$uid(0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x1205, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x305, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_vif\x00') read$msr(r0, &(0x7f00000002c0)=""/238, 0xee) 649.625063ms ago: executing program 3 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7be"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 560.402542ms ago: executing program 4 (id=1241): r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000d40)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000d80)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000dc0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e40), 0x4) write(r1, &(0x7f0000000e80)='V', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000f00)={0x2, 0x4e23, @multicast2}, 0x10) 496.104509ms ago: executing program 3 (id=1242): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@mb_optimize_scan}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x1c1040, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4960, 0x6d2, 0x2, 0x5, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000000020000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./bus\x00', 0x1c1002, 0x40) write(r1, &(0x7f0000001640)='r', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x7fffffff) 379.637101ms ago: executing program 4 (id=1243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2ac}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 372.854701ms ago: executing program 0 (id=1244): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x100, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x46, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 280.662931ms ago: executing program 0 (id=1245): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 257.173683ms ago: executing program 4 (id=1246): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 171.013762ms ago: executing program 4 (id=1247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) write(r0, &(0x7f0000000580)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 0s ago: executing program 1 (id=1248): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x1a1c, 0x0, 0x2, 0x40}}]}]}}}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000680)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): 6 ORIG_RAX: 0000000000000101 [ 83.027431][ T5047] RAX: ffffffffffffffda RBX: 00007f69edb55fa0 RCX: 00007f69ed8cf559 [ 83.027447][ T5047] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 83.027461][ T5047] RBP: 00007f69ed966b50 R08: 0000000000000000 R09: 0000000000000000 [ 83.027483][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.027497][ T5047] R13: 00007f69edb56038 R14: 00007f69edb55fa0 R15: 00007ffcb1bf9b78 [ 83.027517][ T5047] [ 83.170779][ T5051] FAULT_INJECTION: forcing a failure. [ 83.170779][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 83.170909][ T5051] CPU: 0 UID: 0 PID: 5051 Comm: syz.0.496 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.170935][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.170955][ T5051] Call Trace: [ 83.170963][ T5051] [ 83.170971][ T5051] __dump_stack+0x1d/0x30 [ 83.171006][ T5051] dump_stack_lvl+0x95/0xd0 [ 83.171029][ T5051] dump_stack+0x15/0x1b [ 83.171051][ T5051] should_fail_ex+0x259/0x270 [ 83.171079][ T5051] ? copy_net_ns+0xd6/0x490 [ 83.171173][ T5051] should_failslab+0x8c/0xb0 [ 83.171204][ T5051] __kmalloc_noprof+0xb6/0x4b0 [ 83.171294][ T5051] ? copy_net_ns+0xd6/0x490 [ 83.171320][ T5051] copy_net_ns+0xd6/0x490 [ 83.171347][ T5051] create_new_namespaces+0x1f6/0x420 [ 83.171372][ T5051] unshare_nsproxy_namespaces+0x115/0x150 [ 83.171442][ T5051] ksys_unshare+0x3a3/0x690 [ 83.171473][ T5051] __x64_sys_unshare+0x1f/0x30 [ 83.171502][ T5051] x64_sys_call+0x1e33/0x2550 [ 83.171596][ T5051] do_syscall_64+0x112/0x360 [ 83.171631][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.171726][ T5051] RIP: 0033:0x7f6080adf559 [ 83.171743][ T5051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.171763][ T5051] RSP: 002b:00007f607f52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 83.171810][ T5051] RAX: ffffffffffffffda RBX: 00007f6080d65fa0 RCX: 00007f6080adf559 [ 83.171825][ T5051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 83.171840][ T5051] RBP: 00007f6080b76b50 R08: 0000000000000000 R09: 0000000000000000 [ 83.171854][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.171868][ T5051] R13: 00007f6080d66038 R14: 00007f6080d65fa0 R15: 00007ffd3b995ce8 [ 83.171888][ T5051] [ 83.245703][ T5053] loop2: detected capacity change from 0 to 512 [ 83.453548][ T5059] loop1: detected capacity change from 0 to 512 [ 83.502378][ T5059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.502445][ T5059] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.541841][ T5063] loop2: detected capacity change from 0 to 128 [ 83.680457][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.702369][ T5071] loop1: detected capacity change from 0 to 512 [ 83.713407][ T5071] EXT4-fs: inline encryption not supported [ 83.719785][ T5071] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 83.719803][ T5071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.722743][ T5071] EXT4-fs (loop1): 1 truncate cleaned up [ 83.723097][ T5071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.736288][ T5071] EXT4-fs error (device loop1): __ext4_expand_extra_isize:7479: inode #15: comm syz.1.501: bad extra_isize 62 (inode size 256) [ 83.736565][ T5071] EXT4-fs (loop1): Remounting filesystem read-only [ 83.778789][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.888597][ T5078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 83.980264][ T5089] netlink: 'syz.3.507': attribute type 11 has an invalid length. [ 83.980326][ T5089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 84.028470][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 84.129807][ T32] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.213514][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 84.213532][ T29] audit: type=1400 audit(1793439952.370:481): avc: denied { setopt } for pid=5112 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.213862][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 84.452354][ T5123] loop2: detected capacity change from 0 to 512 [ 84.460059][ T5123] syz.2.520: attempt to access beyond end of device [ 84.460059][ T5123] loop2: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 84.461949][ T5123] syz.2.520: attempt to access beyond end of device [ 84.461949][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462051][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462051][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462152][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462152][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462195][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462195][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462287][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462287][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462336][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462336][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462423][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462423][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462462][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462462][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.462554][ T5123] syz.2.520: attempt to access beyond end of device [ 84.462554][ T5123] loop2: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 84.823714][ T5119] loop4: detected capacity change from 0 to 512 [ 84.840211][ T5119] ext4: Unknown parameter 'fowner>00000000000000000000' [ 85.103651][ T29] audit: type=1400 audit(1793439953.260:482): avc: denied { append } for pid=5140 comm="syz.0.528" name="sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.377778][ T29] audit: type=1400 audit(1793439953.540:483): avc: denied { setopt } for pid=5151 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.494922][ T29] audit: type=1326 audit(1793439953.650:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.494959][ T29] audit: type=1326 audit(1793439953.650:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.494998][ T29] audit: type=1326 audit(1793439953.650:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.509705][ T5137] loop4: detected capacity change from 0 to 512 [ 85.521929][ T29] audit: type=1326 audit(1793439953.660:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.521962][ T29] audit: type=1326 audit(1793439953.660:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.522024][ T29] audit: type=1326 audit(1793439953.660:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.522052][ T29] audit: type=1326 audit(1793439953.660:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.2.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ed8cf559 code=0x7ffc0000 [ 85.689794][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 85.689816][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 86.081420][ T5137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.084982][ T5137] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.176341][ T4594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.315494][ T5185] FAULT_INJECTION: forcing a failure. [ 86.315494][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 86.315524][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.3.545 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.315556][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.315586][ T5185] Call Trace: [ 86.315594][ T5185] [ 86.315602][ T5185] __dump_stack+0x1d/0x30 [ 86.315630][ T5185] dump_stack_lvl+0x95/0xd0 [ 86.315653][ T5185] dump_stack+0x15/0x1b [ 86.315677][ T5185] should_fail_ex+0x259/0x270 [ 86.315707][ T5185] should_failslab+0x8c/0xb0 [ 86.315739][ T5185] __kvmalloc_node_noprof+0x14f/0x5b0 [ 86.315833][ T5185] ? nf_hook_entries_grow+0x1cb/0x460 [ 86.315861][ T5185] ? nf_hook_entries_grow+0x1cb/0x460 [ 86.315894][ T5185] nf_hook_entries_grow+0x1cb/0x460 [ 86.315917][ T5185] ? rb_insert_color+0x6e/0x2a0 [ 86.315970][ T5185] __nf_register_net_hook+0x16e/0x4d0 [ 86.316063][ T5185] nf_register_net_hook+0x88/0x130 [ 86.316085][ T5185] nf_register_net_hooks+0x44/0x150 [ 86.316110][ T5185] selinux_nf_register+0x21/0x30 [ 86.316217][ T5185] ops_init+0x22a/0x2e0 [ 86.316249][ T5185] setup_net+0x9f/0x230 [ 86.316341][ T5185] copy_net_ns+0x339/0x490 [ 86.316406][ T5185] create_new_namespaces+0x1f6/0x420 [ 86.316434][ T5185] unshare_nsproxy_namespaces+0x115/0x150 [ 86.316461][ T5185] ksys_unshare+0x3a3/0x690 [ 86.316535][ T5185] __x64_sys_unshare+0x1f/0x30 [ 86.316566][ T5185] x64_sys_call+0x1e33/0x2550 [ 86.316594][ T5185] do_syscall_64+0x112/0x360 [ 86.316632][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.316654][ T5185] RIP: 0033:0x7f1057bbf559 [ 86.316703][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.316725][ T5185] RSP: 002b:00007f1056617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.316747][ T5185] RAX: ffffffffffffffda RBX: 00007f1057e45fa0 RCX: 00007f1057bbf559 [ 86.316761][ T5185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 86.316779][ T5185] RBP: 00007f1057c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 86.316791][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.316803][ T5185] R13: 00007f1057e46038 R14: 00007f1057e45fa0 R15: 00007ffdaf5bd058 [ 86.316820][ T5185] [ 86.496814][ T5197] loop2: detected capacity change from 0 to 512 [ 86.541396][ T5197] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 86.541412][ T5197] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.543989][ T5197] EXT4-fs (loop2): 1 truncate cleaned up [ 86.544491][ T5197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.560458][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.620562][ T5207] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 86.635854][ T5207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.688490][ T5207] bond3: (slave veth3): Enslaving as an active interface with a down link [ 86.693490][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.722215][ T5207] bond3: (slave dummy0): making interface the new active one [ 86.724466][ T5207] dummy0: entered promiscuous mode [ 86.724658][ T5207] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 86.760991][ T5207] bond3 (unregistering): (slave veth3): Releasing active interface [ 86.762424][ T5207] bond3 (unregistering): (slave dummy0): Releasing active interface [ 86.762448][ T5207] dummy0: left promiscuous mode [ 86.764710][ T5207] bond3 (unregistering): Released all slaves [ 87.016940][ T5237] bond1: (slave ): Releasing active interface [ 87.019992][ T5237] bridge_slave_0: left allmulticast mode [ 87.020013][ T5237] bridge_slave_0: left promiscuous mode [ 87.020175][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.024599][ T5237] bridge_slave_1: left allmulticast mode [ 87.024619][ T5237] bridge_slave_1: left promiscuous mode [ 87.024707][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.063271][ T5237] bond0: (slave bond_slave_0): Releasing backup interface [ 87.094649][ T5237] bond0: (slave bond_slave_1): Releasing backup interface [ 87.104573][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.130271][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.131727][ T5237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.305653][ T5245] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 87.305679][ T5245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.305828][ T5245] vhci_hcd vhci_hcd.0: Device attached [ 87.330543][ T5248] vhci_hcd: connection closed [ 87.335657][ T32] vhci_hcd vhci_hcd.4: stop threads [ 87.335681][ T32] vhci_hcd vhci_hcd.4: release socket [ 87.335699][ T32] vhci_hcd vhci_hcd.4: disconnect device [ 87.559996][ T5258] FAULT_INJECTION: forcing a failure. [ 87.559996][ T5258] name failslab, interval 1, probability 0, space 0, times 0 [ 87.560165][ T5258] CPU: 0 UID: 0 PID: 5258 Comm: syz.1.574 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.560253][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.560267][ T5258] Call Trace: [ 87.560276][ T5258] [ 87.560285][ T5258] __dump_stack+0x1d/0x30 [ 87.560315][ T5258] dump_stack_lvl+0x95/0xd0 [ 87.560337][ T5258] dump_stack+0x15/0x1b [ 87.560395][ T5258] should_fail_ex+0x259/0x270 [ 87.560427][ T5258] should_failslab+0x8c/0xb0 [ 87.560461][ T5258] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 87.560535][ T5258] ? irqentry_exit+0x58f/0x610 [ 87.560565][ T5258] ? __d_alloc+0x34/0x320 [ 87.560593][ T5258] ? __d_alloc+0x34/0x320 [ 87.560695][ T5258] __d_alloc+0x34/0x320 [ 87.560717][ T5258] ? d_alloc_pseudo+0x13/0x80 [ 87.560762][ T5258] d_alloc_pseudo+0x1e/0x80 [ 87.560803][ T5258] alloc_path_pseudo+0xa4/0x140 [ 87.560830][ T5258] alloc_file_pseudo+0x55/0x120 [ 87.561013][ T5258] anon_inode_getfile_fmode+0xa5/0x140 [ 87.561092][ T5258] __se_sys_timerfd_create+0x1f6/0x2a0 [ 87.561147][ T5258] __x64_sys_timerfd_create+0x31/0x40 [ 87.561211][ T5258] x64_sys_call+0x1ddb/0x2550 [ 87.561242][ T5258] do_syscall_64+0x112/0x360 [ 87.561324][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.561382][ T5258] RIP: 0033:0x7f0cbd39f559 [ 87.561400][ T5258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.561446][ T5258] RSP: 002b:00007f0cbbdef028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 87.561467][ T5258] RAX: ffffffffffffffda RBX: 00007f0cbd625fa0 RCX: 00007f0cbd39f559 [ 87.561483][ T5258] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000007 [ 87.561500][ T5258] RBP: 00007f0cbd436b50 R08: 0000000000000000 R09: 0000000000000000 [ 87.561517][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.561533][ T5258] R13: 00007f0cbd626038 R14: 00007f0cbd625fa0 R15: 00007ffcc533b978 [ 87.561557][ T5258] [ 89.036162][ T5314] capability: warning: `syz.3.595' uses 32-bit capabilities (legacy support in use) [ 89.083872][ T5318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'. [ 90.376870][ T5357] bridge0: entered allmulticast mode [ 90.386088][ T5359] veth1_to_bond: entered allmulticast mode [ 90.392137][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 90.438430][ T5358] veth1_to_bond: left allmulticast mode [ 90.604062][ T5341] loop3: detected capacity change from 0 to 4096 [ 90.639809][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.702903][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.373432][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 91.373451][ T29] audit: type=1400 audit(1793440215.530:561): avc: denied { getopt } for pid=5371 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.539812][ T29] audit: type=1400 audit(1793440215.700:562): avc: denied { write } for pid=5384 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.548702][ T29] audit: type=1400 audit(1793440215.710:563): avc: denied { setopt } for pid=5384 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.567293][ T5305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.658404][ T5391] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 91.668073][ T5391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.689521][ T5391] bond3: (slave gretap1): making interface the new active one [ 91.689908][ T5391] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 91.725399][ T5391] bond3 (unregistering): (slave gretap1): Releasing active interface [ 91.733187][ T5391] bond3 (unregistering): Released all slaves [ 91.753033][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 91.755060][ T5389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 92.034069][ T5382] loop1: detected capacity change from 0 to 512 [ 92.068905][ T5382] EXT4-fs: Ignoring removed nobh option [ 92.257602][ T5395] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 92.260384][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 92.261274][ T5389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 92.285238][ T184] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.285343][ T184] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.285416][ T184] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.285468][ T184] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.388142][ T5382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.388782][ T5382] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.542413][ T29] audit: type=1400 audit(1793440216.690:564): avc: denied { write } for pid=5379 comm="syz.1.619" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.619162][ T72] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.668457][ T5382] EXT4-fs error (device loop1): ext4_do_update_inode:6707: inode #2: comm syz.1.619: corrupted inode contents [ 92.671438][ T5382] EXT4-fs (loop1): Remounting filesystem read-only [ 92.733979][ T29] audit: type=1400 audit(1793440216.890:565): avc: denied { write } for pid=5379 comm="syz.1.619" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.794752][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.872643][ T5435] xt_IDLETIMER: timeout value is zero [ 92.891418][ T5436] lo: entered allmulticast mode [ 92.896484][ T5428] lo: left allmulticast mode [ 93.026808][ T5442] loop1: detected capacity change from 0 to 512 [ 93.157500][ T5431] bio_check_eod: 13902 callbacks suppressed [ 93.157517][ T5431] syz.1.637: attempt to access beyond end of device [ 93.157517][ T5431] loop1: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 93.255254][ T29] audit: type=1400 audit(1793440217.400:566): avc: denied { create } for pid=5444 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.306354][ T29] audit: type=1400 audit(1793440217.470:567): avc: denied { getattr } for pid=5447 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.329957][ T29] audit: type=1400 audit(1793440217.490:568): avc: denied { read } for pid=5449 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.330011][ T29] audit: type=1400 audit(1793440217.490:569): avc: denied { open } for pid=5449 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.411110][ T5431] syz.1.637: attempt to access beyond end of device [ 93.411110][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.411177][ T5431] syz.1.637: attempt to access beyond end of device [ 93.411177][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.412313][ T5431] syz.1.637: attempt to access beyond end of device [ 93.412313][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.463449][ T5431] syz.1.637: attempt to access beyond end of device [ 93.463449][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.482753][ T5431] syz.1.637: attempt to access beyond end of device [ 93.482753][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.482806][ T5431] syz.1.637: attempt to access beyond end of device [ 93.482806][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.529182][ T5431] syz.1.637: attempt to access beyond end of device [ 93.529182][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.557965][ T5431] syz.1.637: attempt to access beyond end of device [ 93.557965][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.564682][ T5431] syz.1.637: attempt to access beyond end of device [ 93.564682][ T5431] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 93.600430][ T29] audit: type=1400 audit(1793440217.760:570): avc: denied { write } for pid=5446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.837968][ T5476] loop1: detected capacity change from 0 to 512 [ 93.840340][ T5476] ext4: Unknown parameter 'dont_appraise' [ 94.158093][ T5483] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 94.184458][ T5483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.185527][ T5483] bond3: (slave bond4): making interface the new active one [ 94.185736][ T5483] bond3: (slave bond4): Enslaving as an active interface with an up link [ 94.441928][ T5481] loop1: detected capacity change from 0 to 512 [ 94.499332][ T5495] loop4: detected capacity change from 0 to 1024 [ 94.530841][ T5495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.565251][ T5481] ext4: Unknown parameter 'fowner>00000000000000000000' [ 94.658411][ T4594] Bluetooth: hci0: command 0x1003 tx timeout [ 94.658451][ T3733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.321253][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.496242][ T5510] loop4: detected capacity change from 0 to 1024 [ 95.508196][ T5510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.527842][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.589199][ T5518] loop3: detected capacity change from 0 to 512 [ 95.694676][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.778121][ T5522] FAULT_INJECTION: forcing a failure. [ 95.778121][ T5522] name failslab, interval 1, probability 0, space 0, times 0 [ 95.778152][ T5522] CPU: 0 UID: 0 PID: 5522 Comm: syz.4.664 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.778234][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.778316][ T5522] Call Trace: [ 95.778323][ T5522] [ 95.778332][ T5522] __dump_stack+0x1d/0x30 [ 95.778465][ T5522] dump_stack_lvl+0x95/0xd0 [ 95.778548][ T5522] dump_stack+0x15/0x1b [ 95.778627][ T5522] should_fail_ex+0x259/0x270 [ 95.778658][ T5522] should_failslab+0x8c/0xb0 [ 95.778810][ T5522] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 95.778852][ T5522] ? __d_alloc+0x34/0x320 [ 95.778881][ T5522] ? __d_alloc+0x34/0x320 [ 95.778940][ T5522] __d_alloc+0x34/0x320 [ 95.779061][ T5522] d_alloc+0x2e/0x100 [ 95.779090][ T5522] lookup_one_qstr_excl+0x95/0x240 [ 95.779125][ T5522] start_dirop+0x3e/0x70 [ 95.779153][ T5522] simple_start_creating+0xa2/0xd0 [ 95.779224][ T5522] debugfs_start_creating+0xcd/0x160 [ 95.779253][ T5522] __debugfs_create_file+0x70/0x2b0 [ 95.779280][ T5522] debugfs_create_file_full+0x3f/0x60 [ 95.779381][ T5522] ref_tracker_dir_debugfs+0x10e/0x1e0 [ 95.779420][ T5522] preinit_net+0x1e4/0x330 [ 95.779446][ T5522] copy_net_ns+0x188/0x490 [ 95.779519][ T5522] create_new_namespaces+0x1f6/0x420 [ 95.779546][ T5522] unshare_nsproxy_namespaces+0x115/0x150 [ 95.779574][ T5522] ksys_unshare+0x3a3/0x690 [ 95.779659][ T5522] __x64_sys_unshare+0x1f/0x30 [ 95.779719][ T5522] x64_sys_call+0x1e33/0x2550 [ 95.779748][ T5522] do_syscall_64+0x112/0x360 [ 95.779805][ T5522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.779891][ T5522] RIP: 0033:0x7f30e7aef559 [ 95.779911][ T5522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.779933][ T5522] RSP: 002b:00007f30e6547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.779957][ T5522] RAX: ffffffffffffffda RBX: 00007f30e7d75fa0 RCX: 00007f30e7aef559 [ 95.779998][ T5522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 95.780014][ T5522] RBP: 00007f30e7b86b50 R08: 0000000000000000 R09: 0000000000000000 [ 95.780030][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.780046][ T5522] R13: 00007f30e7d76038 R14: 00007f30e7d75fa0 R15: 00007ffe55cf0bd8 [ 95.780144][ T5522] [ 95.818131][ T5522] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.375975][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 96.375994][ T29] audit: type=1400 audit(1793440220.540:589): avc: denied { watch watch_reads } for pid=5525 comm="syz.0.677" path="/154" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.386155][ T5528] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 96.386244][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.386369][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 96.396838][ T5531] vhci_hcd: connection closed [ 96.397070][ T184] vhci_hcd vhci_hcd.3: stop threads [ 96.397146][ T184] vhci_hcd vhci_hcd.3: release socket [ 96.397223][ T184] vhci_hcd vhci_hcd.3: disconnect device [ 96.405992][ T5529] uprobe: syz.4.678:5529 failed to unregister, leaking uprobe [ 96.789057][ T5472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.145135][ T5535] loop1: detected capacity change from 0 to 512 [ 97.441050][ T5554] loop4: detected capacity change from 0 to 512 [ 97.451730][ T5554] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 97.451807][ T5554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.485225][ T5554] EXT4-fs (loop4): 1 truncate cleaned up [ 97.499824][ T5554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.524197][ T29] audit: type=1400 audit(1793440221.680:590): avc: denied { write } for pid=5553 comm="syz.4.675" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.703555][ T5535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.721913][ T5535] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.740706][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.779107][ T29] audit: type=1400 audit(1793440221.940:591): avc: denied { connect } for pid=5559 comm="syz.4.676" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.894428][ T5564] netlink: 220 bytes leftover after parsing attributes in process `syz.0.681'. [ 97.898107][ T29] audit: type=1400 audit(1793440222.050:593): avc: denied { setopt } for pid=5563 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.940059][ T29] audit: type=1326 audit(1793440222.090:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 97.940173][ T29] audit: type=1326 audit(1793440222.100:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 97.940224][ T29] audit: type=1326 audit(1793440222.100:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 97.940291][ T29] audit: type=1326 audit(1793440222.100:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 97.940318][ T29] audit: type=1326 audit(1793440222.100:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 97.940411][ T29] audit: type=1326 audit(1793440222.100:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.0.682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6080adf559 code=0x7ffc0000 [ 98.121549][ T5568] loop3: detected capacity change from 0 to 512 [ 98.123919][ T5568] ext4: Unknown parameter 'fowner>00000000000000000000' [ 98.208686][ T5577] netlink: 'syz.3.687': attribute type 1 has an invalid length. [ 98.217179][ T5577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 98.267993][ T5577] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 98.307792][ T5577] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 98.319894][ T5577] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 98.319913][ T5577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 98.319948][ T5577] dummy0: entered promiscuous mode [ 98.345406][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 98.345453][ T184] bond4: (slave dummy0): link status up again after 0 ms [ 98.345649][ T5577] bond4: (slave dummy0): Removing an active aggregator [ 98.345914][ T5577] bond4: (slave dummy0): Releasing backup interface [ 98.394577][ T5583] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.490539][ T5535] syz.1.667 (5535) used greatest stack depth: 9736 bytes left [ 98.504401][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.578394][ T5588] netlink: 164 bytes leftover after parsing attributes in process `syz.3.690'. [ 98.759408][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 98.874535][ T5606] loop4: detected capacity change from 0 to 512 [ 98.885766][ T5606] ext4: Unknown parameter 'dont_appraise' [ 99.466560][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.848167][ T5640] loop1: detected capacity change from 0 to 1024 [ 99.873527][ T5640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.651448][ T5665] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 100.758867][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.800555][ T5671] netlink: 'syz.1.719': attribute type 27 has an invalid length. [ 100.800778][ T5671] bridge0: left allmulticast mode [ 100.845176][ T32] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845305][ T32] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845345][ T32] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845431][ T32] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.877302][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.880222][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.964311][ T5671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.964410][ T5671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.987946][ T5671] veth1_vlan: left promiscuous mode [ 100.989135][ T5671] veth0_vlan: left promiscuous mode [ 100.990635][ T5671] veth0_vlan: entered promiscuous mode [ 100.992100][ T5671] veth1_vlan: entered promiscuous mode [ 101.027388][ T5671] veth1_macvtap: left promiscuous mode [ 101.027978][ T5671] veth0_macvtap: left promiscuous mode [ 101.028481][ T5671] veth0_macvtap: entered promiscuous mode [ 101.028966][ T5671] veth1_macvtap: entered promiscuous mode [ 101.031707][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.032666][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.033478][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.034155][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.082214][ T5678] loop3: detected capacity change from 0 to 512 [ 101.113843][ T5671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.116462][ T5678] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 101.116516][ T5678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.120902][ T5678] EXT4-fs (loop3): 1 truncate cleaned up [ 101.122666][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.147999][ T5671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.150217][ T5671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.237098][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.237243][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.237293][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.237329][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.274310][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.338297][ T5681] loop3: detected capacity change from 0 to 512 [ 101.352081][ T5681] EXT4-fs (loop3): 1 truncate cleaned up [ 101.352504][ T5681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.463905][ T5687] ip_tables: iptables: counters copy to user failed while replacing table [ 101.465248][ T5687] ip_tables: iptables: counters copy to user failed while replacing table [ 101.482978][ T5688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.724: bg 0: block 465: padding at end of block bitmap is not set [ 101.484586][ T5688] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 117 [ 101.484617][ T5688] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.484617][ T5688] [ 101.514706][ T5683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.725'. [ 101.553527][ T5691] FAULT_INJECTION: forcing a failure. [ 101.553527][ T5691] name failslab, interval 1, probability 0, space 0, times 0 [ 101.553558][ T5691] CPU: 0 UID: 0 PID: 5691 Comm: syz.4.727 Not tainted syzkaller #0 PREEMPT(lazy) [ 101.553583][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.553595][ T5691] Call Trace: [ 101.553601][ T5691] [ 101.553610][ T5691] __dump_stack+0x1d/0x30 [ 101.553672][ T5691] dump_stack_lvl+0x95/0xd0 [ 101.553699][ T5691] dump_stack+0x15/0x1b [ 101.553722][ T5691] should_fail_ex+0x259/0x270 [ 101.553824][ T5691] should_failslab+0x8c/0xb0 [ 101.553855][ T5691] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 101.553887][ T5691] ? alloc_inode+0x9a/0x170 [ 101.553907][ T5691] ? alloc_inode+0x9a/0x170 [ 101.553991][ T5691] alloc_inode+0x9a/0x170 [ 101.554015][ T5691] path_from_stashed+0xec/0x330 [ 101.554085][ T5691] ns_get_path+0x62/0x80 [ 101.554105][ T5691] perf_event_namespaces+0x344/0x6b0 [ 101.554280][ T5691] ksys_unshare+0x5ce/0x690 [ 101.554309][ T5691] __x64_sys_unshare+0x1f/0x30 [ 101.554337][ T5691] x64_sys_call+0x1e33/0x2550 [ 101.554387][ T5691] do_syscall_64+0x112/0x360 [ 101.554420][ T5691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.554446][ T5691] RIP: 0033:0x7f30e7aef559 [ 101.554466][ T5691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.554551][ T5691] RSP: 002b:00007f30e6547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.554572][ T5691] RAX: ffffffffffffffda RBX: 00007f30e7d75fa0 RCX: 00007f30e7aef559 [ 101.554585][ T5691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006040000 [ 101.554598][ T5691] RBP: 00007f30e7b86b50 R08: 0000000000000000 R09: 0000000000000000 [ 101.554674][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.554690][ T5691] R13: 00007f30e7d76038 R14: 00007f30e7d75fa0 R15: 00007ffe55cf0bd8 [ 101.554712][ T5691] [ 101.756451][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 101.781414][ T5702] team0: Port device team_slave_0 removed [ 102.309945][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.598845][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 102.598871][ T29] audit: type=1400 audit(1793440482.762:633): avc: denied { bind } for pid=5719 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.331544][ T5777] loop4: detected capacity change from 0 to 512 [ 104.332124][ T5777] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.359629][ T5777] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.759: corrupted in-inode xattr: e_value size too large [ 104.359742][ T5777] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.359927][ T5777] EXT4-fs (loop4): Remounting filesystem read-only [ 104.360393][ T5777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.382179][ T5786] loop3: detected capacity change from 0 to 2048 [ 104.407739][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.411933][ T29] audit: type=1400 audit(1793440484.572:634): avc: denied { write } for pid=5785 comm="syz.3.762" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.419032][ T29] audit: type=1400 audit(1793440484.572:635): avc: denied { connect } for pid=5785 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.516781][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.542369][ T5795] loop4: detected capacity change from 0 to 512 [ 104.561013][ T5795] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 104.561030][ T5795] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.571385][ T5795] EXT4-fs (loop4): 1 truncate cleaned up [ 104.571739][ T5795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.609608][ T29] audit: type=1400 audit(1793440484.772:636): avc: denied { write } for pid=5794 comm="syz.4.764" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.703034][ T29] audit: type=1400 audit(1793440484.862:637): avc: denied { write } for pid=5785 comm="syz.3.762" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.703130][ T29] audit: type=1400 audit(1793440484.862:638): avc: denied { write } for pid=5785 comm="syz.3.762" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.703154][ T29] audit: type=1400 audit(1793440484.862:639): avc: denied { open } for pid=5785 comm="syz.3.762" path="/156/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.704008][ T5786] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 104.704035][ T29] audit: type=1400 audit(1793440484.862:640): avc: denied { ioctl } for pid=5785 comm="syz.3.762" path="/156/bus/file1" dev="loop3" ino=15 ioctlcmd=0x40086607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.726646][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 104.730926][ T5800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.765'. [ 104.814065][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.836211][ T5803] ip_tables: iptables: counters copy to user failed while replacing table [ 104.911322][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.942863][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 104.942973][ T5800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.765'. [ 104.956008][ T72] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.956129][ T72] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.956168][ T72] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.956201][ T72] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.303504][ T5816] batman_adv: batadv0: Adding interface: ipvlan2 [ 105.303523][ T5816] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.303639][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.303654][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.303665][ T5816] batman_adv: batadv0: Interface activated: ipvlan2 [ 105.384274][ T5819] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.792245][ T5828] netlink: 104 bytes leftover after parsing attributes in process `syz.3.776'. [ 106.387981][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 106.388006][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 106.476911][ T29] audit: type=1400 audit(1793440486.642:641): avc: denied { map } for pid=5843 comm="syz.4.784" path="socket:[14435]" dev="sockfs" ino=14435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 106.627121][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.792'. [ 107.370922][ T5856] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 107.385792][ T5865] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 107.397139][ T5865] bond0 (unregistering): Released all slaves [ 107.520261][ T5885] loop1: detected capacity change from 0 to 1024 [ 107.538008][ T5885] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.538123][ T5885] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 107.541037][ T5885] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.541169][ T5885] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 107.610447][ T5885] ip6gretap0: entered promiscuous mode [ 107.610537][ T5885] ÿÿÿÿ: entered promiscuous mode [ 107.914525][ T5889] loop2: detected capacity change from 0 to 512 [ 107.962920][ T5889] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 107.963035][ T5889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.995581][ T5889] EXT4-fs (loop2): 1 truncate cleaned up [ 108.004441][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.024594][ T29] audit: type=1400 audit(1793441000.171:642): avc: denied { write } for pid=5881 comm="syz.2.799" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.046365][ T29] audit: type=1400 audit(1793441000.191:643): avc: denied { read } for pid=5881 comm="syz.2.799" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.068899][ T29] audit: type=1400 audit(1793441000.211:644): avc: denied { getopt } for pid=5898 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.131862][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.408591][ T5910] gtp0: entered promiscuous mode [ 108.408613][ T5910] gtp0: entered allmulticast mode [ 108.409273][ T5910] team0: Device gtp0 is of different type [ 108.841076][ T5924] FAULT_INJECTION: forcing a failure. [ 108.841076][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 108.841109][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.0.815 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.841144][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.841159][ T5924] Call Trace: [ 108.841167][ T5924] [ 108.841174][ T5924] __dump_stack+0x1d/0x30 [ 108.841202][ T5924] dump_stack_lvl+0x95/0xd0 [ 108.841227][ T5924] dump_stack+0x15/0x1b [ 108.841250][ T5924] should_fail_ex+0x259/0x270 [ 108.841280][ T5924] ? anon_vma_clone+0x14f/0x550 [ 108.841314][ T5924] should_failslab+0x8c/0xb0 [ 108.841349][ T5924] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 108.841380][ T5924] ? anon_vma_clone+0x14f/0x550 [ 108.841415][ T5924] anon_vma_clone+0x14f/0x550 [ 108.841450][ T5924] __split_vma+0x380/0x7c0 [ 108.841477][ T5924] vms_gather_munmap_vmas+0x265/0x7f0 [ 108.841503][ T5924] do_vmi_align_munmap+0x1e1/0x400 [ 108.841533][ T5924] do_vmi_munmap+0x1da/0x220 [ 108.841559][ T5924] move_vma+0xd05/0xff0 [ 108.841590][ T5924] ? cap_mmap_addr+0xb1/0x250 [ 108.841615][ T5924] mremap_to+0x413/0x470 [ 108.841642][ T5924] ? mas_walk+0x22d/0x340 [ 108.841672][ T5924] ? check_prep_vma+0x41b/0x5f0 [ 108.841702][ T5924] __se_sys_mremap+0x8cd/0xcc0 [ 108.841738][ T5924] __x64_sys_mremap+0x67/0x80 [ 108.841766][ T5924] x64_sys_call+0x1072/0x2550 [ 108.841794][ T5924] do_syscall_64+0x112/0x360 [ 108.841828][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.841852][ T5924] RIP: 0033:0x7f6080adf559 [ 108.841871][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.841891][ T5924] RSP: 002b:00007f607f52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 108.841915][ T5924] RAX: ffffffffffffffda RBX: 00007f6080d65fa0 RCX: 00007f6080adf559 [ 108.841932][ T5924] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 108.841947][ T5924] RBP: 00007f6080b76b50 R08: 0000200000ffd000 R09: 0000000000000000 [ 108.841962][ T5924] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 108.841976][ T5924] R13: 00007f6080d66038 R14: 00007f6080d65fa0 R15: 00007ffd3b995ce8 [ 108.841997][ T5924] [ 108.923140][ T5926] FAULT_INJECTION: forcing a failure. [ 108.923140][ T5926] name failslab, interval 1, probability 0, space 0, times 0 [ 108.923171][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.923263][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.923276][ T5926] Call Trace: [ 108.923284][ T5926] [ 108.923293][ T5926] __dump_stack+0x1d/0x30 [ 108.923321][ T5926] dump_stack_lvl+0x95/0xd0 [ 108.923393][ T5926] dump_stack+0x15/0x1b [ 108.923414][ T5926] should_fail_ex+0x259/0x270 [ 108.923513][ T5926] ? alloc_pipe_info+0xad/0x340 [ 108.923544][ T5926] should_failslab+0x8c/0xb0 [ 108.923582][ T5926] __kmalloc_cache_noprof+0x5d/0x3e0 [ 108.923613][ T5926] ? avc_has_perm_noaudit+0xac/0x160 [ 108.923696][ T5926] ? alloc_pipe_info+0xad/0x340 [ 108.923760][ T5926] alloc_pipe_info+0xad/0x340 [ 108.923862][ T5926] splice_direct_to_actor+0x58f/0x680 [ 108.923886][ T5926] ? __file_has_perm+0x3d9/0x430 [ 108.923914][ T5926] ? __pfx_direct_splice_actor+0x10/0x10 [ 108.923940][ T5926] do_splice_direct+0x119/0x1a0 [ 108.923962][ T5926] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 108.923989][ T5926] do_sendfile+0x37d/0x640 [ 108.924061][ T5926] __x64_sys_sendfile64+0x105/0x150 [ 108.924089][ T5926] x64_sys_call+0x1015/0x2550 [ 108.924115][ T5926] do_syscall_64+0x112/0x360 [ 108.924146][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.924169][ T5926] RIP: 0033:0x7f1057bbf559 [ 108.924267][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.924286][ T5926] RSP: 002b:00007f1056617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 108.924308][ T5926] RAX: ffffffffffffffda RBX: 00007f1057e45fa0 RCX: 00007f1057bbf559 [ 108.924324][ T5926] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 108.924337][ T5926] RBP: 00007f1057c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 108.924351][ T5926] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 108.924436][ T5926] R13: 00007f1057e46038 R14: 00007f1057e45fa0 R15: 00007ffdaf5bd058 [ 108.924456][ T5926] [ 109.102042][ T29] audit: type=1400 audit(1793441001.231:645): avc: denied { getopt } for pid=5931 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.185655][ T5940] FAULT_INJECTION: forcing a failure. [ 109.185655][ T5940] name failslab, interval 1, probability 0, space 0, times 0 [ 109.185685][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.185754][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.185767][ T5940] Call Trace: [ 109.185776][ T5940] [ 109.185827][ T5940] __dump_stack+0x1d/0x30 [ 109.185854][ T5940] dump_stack_lvl+0x95/0xd0 [ 109.185878][ T5940] dump_stack+0x15/0x1b [ 109.185900][ T5940] should_fail_ex+0x259/0x270 [ 109.185950][ T5940] ? __alloc_skb+0x2e0/0x6f0 [ 109.185981][ T5940] should_failslab+0x8c/0xb0 [ 109.186011][ T5940] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 109.186046][ T5940] ? __alloc_skb+0x2e0/0x6f0 [ 109.186122][ T5940] __alloc_skb+0x2e0/0x6f0 [ 109.186149][ T5940] ? __list_del_entry_valid_or_report+0x65/0x130 [ 109.186172][ T5940] ? __alloc_skb+0x209/0x6f0 [ 109.186264][ T5940] netlink_ack+0xfd/0x530 [ 109.186298][ T5940] audit_receive+0x1bdd/0x1ea0 [ 109.186320][ T5940] ? _raw_spin_lock+0x61/0xa0 [ 109.186341][ T5940] ? __netlink_deliver_tap+0x3ce/0x3e0 [ 109.186458][ T5940] ? __netlink_lookup+0x274/0x2a0 [ 109.186482][ T5940] netlink_unicast+0x665/0x740 [ 109.186535][ T5940] netlink_sendmsg+0x5ef/0x740 [ 109.186558][ T5940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.186639][ T5940] ____sys_sendmsg+0x54a/0x590 [ 109.186662][ T5940] ___sys_sendmsg+0x195/0x1e0 [ 109.186693][ T5940] __x64_sys_sendmsg+0xd4/0x160 [ 109.186717][ T5940] x64_sys_call+0x22ab/0x2550 [ 109.186743][ T5940] do_syscall_64+0x112/0x360 [ 109.186900][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.186936][ T5940] RIP: 0033:0x7f1057bbf559 [ 109.187024][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.187044][ T5940] RSP: 002b:00007f1056617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.187085][ T5940] RAX: ffffffffffffffda RBX: 00007f1057e45fa0 RCX: 00007f1057bbf559 [ 109.187100][ T5940] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 109.187115][ T5940] RBP: 00007f1057c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 109.187209][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.187222][ T5940] R13: 00007f1057e46038 R14: 00007f1057e45fa0 R15: 00007ffdaf5bd058 [ 109.187255][ T5940] [ 109.187992][ T29] audit: type=1107 audit(1793441001.341:646): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='[ø]ûçhcîøKï“ÝÏž [ 109.187992][ T29] Eodì¼G‚¾Í&_Ü¢ù„•s´é«D_V½u¸Øt@uÔï4m…|Á·6-¢’YU–ÿ£U [tÈ[¯rœoºÿ' [ 109.194296][ T5935] bridge_slave_0: left allmulticast mode [ 109.194318][ T5935] bridge_slave_0: left promiscuous mode [ 109.194517][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.204928][ T5935] bridge_slave_1: left allmulticast mode [ 109.204950][ T5935] bridge_slave_1: left promiscuous mode [ 109.205176][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.268924][ T5935] bond0: (slave bond_slave_0): Releasing backup interface [ 109.374023][ T5935] bond0: (slave bond_slave_1): Releasing backup interface [ 109.393453][ T5935] team0: Port device team_slave_0 removed [ 109.394177][ T5935] team0: Port device team_slave_1 removed [ 109.394433][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.399918][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.405402][ T5935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.456367][ T5941] team0: Port device xfrm0 added [ 110.675829][ T6000] bond1: (slave ): Releasing active interface [ 110.700084][ T6000] bridge_slave_0: left allmulticast mode [ 110.700119][ T6000] bridge_slave_0: left promiscuous mode [ 110.700251][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.725980][ T6000] bridge_slave_1: left allmulticast mode [ 110.726013][ T6000] bridge_slave_1: left promiscuous mode [ 110.726192][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.755911][ T6000] bond0: (slave bond_slave_1): Releasing backup interface [ 110.763350][ T6000] team0: Port device team_slave_0 removed [ 110.779732][ T6000] team0: Port device team_slave_1 removed [ 110.780331][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.780346][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.781571][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.781586][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.783479][ T6000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.824898][ T5944] Set syz1 is full, maxelem 65536 reached [ 110.847580][ T6001] team0: Mode changed to "loadbalance" [ 110.847869][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 110.847891][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 110.891847][ T29] audit: type=1326 audit(1793441003.051:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 110.891907][ T29] audit: type=1326 audit(1793441003.051:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 110.893216][ T29] audit: type=1326 audit(1793441003.051:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 110.893248][ T29] audit: type=1326 audit(1793441003.051:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 110.893292][ T29] audit: type=1326 audit(1793441003.051:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz.1.851" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 110.966925][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 110.967053][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 110.967237][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'. [ 111.108444][ T107] ------------[ cut here ]------------ [ 111.108457][ T107] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x8f/0xa0, CPU#0: kworker/u8:5/107 [ 111.124031][ T107] Modules linked in: [ 111.128064][ T107] CPU: 0 UID: 0 PID: 107 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.137577][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.147687][ T107] Workqueue: iou_exit io_ring_exit_work [ 111.153285][ T107] RIP: 0010:io_sq_thread_stop+0x8f/0xa0 [ 111.159018][ T107] Code: 97 f6 59 ff 48 89 df e8 af 84 40 ff eb 05 e8 88 f6 59 ff 4c 89 f7 e8 40 18 ae 03 5b 41 5e e9 98 f2 ae 03 cc e8 72 f6 59 ff 90 <0f> 0b 90 eb a0 e8 67 f6 59 ff 90 0f 0b 90 eb ca 90 90 90 90 90 90 [ 111.178904][ T107] RSP: 0018:ffffc900010c7c20 EFLAGS: 00010293 [ 111.185012][ T107] RAX: ffffffff8200a9ce RBX: ffff88811a3f3b00 RCX: ffff888102416780 [ 111.193122][ T107] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 111.201284][ T107] RBP: 0000000000000000 R08: 0001c900010c7bcf R09: 0000000000000000 [ 111.209390][ T107] R10: 0001c900010c7bcc R11: 0001c900010c7bcf R12: ffff88811a3f3b28 [ 111.217452][ T107] R13: ffff88811a3f3b28 R14: 0000000000000001 R15: ffff88811a3f3b10 [ 111.225626][ T107] FS: 0000000000000000(0000) GS:ffff8882ae652000(0000) knlGS:0000000000000000 [ 111.234623][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.241519][ T107] CR2: 00007f30e88a56c8 CR3: 000000010482c000 CR4: 00000000003506f0 [ 111.249590][ T107] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.257732][ T107] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 111.265815][ T107] Call Trace: [ 111.269141][ T107] [ 111.272151][ T107] io_put_sq_data+0x4e/0xe0 [ 111.276721][ T107] io_sq_thread_finish+0x1e9/0x230 [ 111.281887][ T107] io_ring_ctx_free+0x1a/0x460 [ 111.286736][ T107] io_ring_exit_work+0x3b0/0x3e0 [ 111.291973][ T107] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 111.297710][ T107] process_scheduled_works+0x53f/0xa20 [ 111.303426][ T107] ? __list_add_valid_or_report+0x38/0xe0 [ 111.309296][ T107] worker_thread+0x56c/0x770 [ 111.313919][ T107] ? __pfx_worker_thread+0x10/0x10 [ 111.319125][ T107] kthread+0x223/0x270 [ 111.323222][ T107] ? __pfx_kthread+0x10/0x10 [ 111.327893][ T107] ret_from_fork+0x146/0x330 [ 111.332576][ T107] ? __pfx_kthread+0x10/0x10 [ 111.337254][ T107] ret_from_fork_asm+0x1a/0x30 [ 111.342083][ T107] [ 111.345241][ T107] ---[ end trace 0000000000000000 ]--- [ 111.376097][ T6047] bridge_slave_0: left allmulticast mode [ 111.376122][ T6047] bridge_slave_0: left promiscuous mode [ 111.376196][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.381916][ T6047] bridge_slave_1: left allmulticast mode [ 111.381961][ T6047] bridge_slave_1: left promiscuous mode [ 111.382158][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.428114][ T6047] bond0: (slave bond_slave_0): Releasing backup interface [ 111.449224][ T6047] bond0: (slave bond_slave_1): Releasing backup interface [ 111.464301][ T6047] team0: Port device team_slave_1 removed [ 111.465965][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.465982][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.472629][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.472643][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.481364][ T6047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.490037][ T6053] team0: Mode changed to "loadbalance" [ 111.523720][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.523743][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 111.680255][ T6063] FAULT_INJECTION: forcing a failure. [ 111.680255][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 111.680292][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.1.871 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 111.680408][ T6063] Tainted: [W]=WARN [ 111.680429][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.680443][ T6063] Call Trace: [ 111.680450][ T6063] [ 111.680511][ T6063] __dump_stack+0x1d/0x30 [ 111.680540][ T6063] dump_stack_lvl+0x95/0xd0 [ 111.680566][ T6063] dump_stack+0x15/0x1b [ 111.680590][ T6063] should_fail_ex+0x259/0x270 [ 111.680621][ T6063] ? tipc_nametbl_insert_publ+0x47/0x950 [ 111.680676][ T6063] should_failslab+0x8c/0xb0 [ 111.680711][ T6063] __kmalloc_cache_noprof+0x5d/0x3e0 [ 111.680859][ T6063] ? tipc_nametbl_insert_publ+0x47/0x950 [ 111.680889][ T6063] tipc_nametbl_insert_publ+0x47/0x950 [ 111.680930][ T6063] ? conn_put+0xbb/0x200 [ 111.680949][ T6063] ? _raw_spin_unlock_bh+0x17/0x20 [ 111.680973][ T6063] ? tipc_conn_rcv_sub+0x1cf/0x200 [ 111.681069][ T6063] ? tipc_topsrv_kern_subscr+0x1a9/0x1e0 [ 111.681095][ T6063] tipc_nametbl_publish+0x155/0x210 [ 111.681203][ T6063] tipc_sk_join+0x329/0x450 [ 111.681304][ T6063] tipc_setsockopt+0x594/0x620 [ 111.681368][ T6063] ? __pfx_tipc_setsockopt+0x10/0x10 [ 111.681411][ T6063] __sys_setsockopt+0x184/0x200 [ 111.681543][ T6063] __x64_sys_setsockopt+0x64/0x80 [ 111.681628][ T6063] x64_sys_call+0x248f/0x2550 [ 111.681668][ T6063] do_syscall_64+0x112/0x360 [ 111.681699][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.681725][ T6063] RIP: 0033:0x7f0cbd39f559 [ 111.681755][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.681785][ T6063] RSP: 002b:00007f0cbbdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.681810][ T6063] RAX: ffffffffffffffda RBX: 00007f0cbd625fa0 RCX: 00007f0cbd39f559 [ 111.681826][ T6063] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 111.681842][ T6063] RBP: 00007f0cbd436b50 R08: 0000000000000010 R09: 0000000000000000 [ 111.681859][ T6063] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 111.681874][ T6063] R13: 00007f0cbd626038 R14: 00007f0cbd625fa0 R15: 00007ffcc533b978 [ 111.681896][ T6063] [ 112.063061][ T6056] loop3: detected capacity change from 0 to 512 [ 112.080674][ T6056] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 112.080714][ T6056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.084290][ T6056] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.868: bad orphan inode 131072 [ 112.084366][ T6056] loop3: lost filesystem error report for type 5 error -117 [ 112.121574][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.155292][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.268506][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 112.291874][ T6098] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 112.339901][ T6098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.343016][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'. [ 112.380948][ T6098] bond3: (slave veth5): Enslaving as an active interface with a down link [ 112.394166][ T6098] bond3: (slave macvlan0): Enslaving as an active interface with a down link [ 112.455305][ T6108] FAULT_INJECTION: forcing a failure. [ 112.455305][ T6108] name failslab, interval 1, probability 0, space 0, times 0 [ 112.455403][ T6108] CPU: 0 UID: 0 PID: 6108 Comm: syz.3.890 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 112.455439][ T6108] Tainted: [W]=WARN [ 112.455447][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.455517][ T6108] Call Trace: [ 112.455525][ T6108] [ 112.455533][ T6108] __dump_stack+0x1d/0x30 [ 112.455565][ T6108] dump_stack_lvl+0x95/0xd0 [ 112.455590][ T6108] dump_stack+0x15/0x1b [ 112.455647][ T6108] should_fail_ex+0x259/0x270 [ 112.455677][ T6108] should_failslab+0x8c/0xb0 [ 112.455711][ T6108] __kvmalloc_node_noprof+0x14f/0x5b0 [ 112.455826][ T6108] ? bpf_check_cfg+0xcf/0x22a0 [ 112.455886][ T6108] ? bpf_check_cfg+0xcf/0x22a0 [ 112.455912][ T6108] bpf_check_cfg+0xcf/0x22a0 [ 112.455942][ T6108] ? _raw_spin_unlock+0x9/0x30 [ 112.456020][ T6108] ? __mod_memcg_lruvec_state+0x1b5/0x2a0 [ 112.456060][ T6108] ? __free_contig_range+0x14d/0x190 [ 112.456096][ T6108] ? vfree+0x35b/0x3c0 [ 112.456247][ T6108] ? kfree+0x143/0x3b0 [ 112.456282][ T6108] ? __rcu_read_unlock+0x4e/0x70 [ 112.456338][ T6108] ? __fget_files+0x184/0x1c0 [ 112.456415][ T6108] ? vfree+0x35b/0x3c0 [ 112.456444][ T6108] ? bpf_map_inc+0xd/0x20 [ 112.456475][ T6108] ? __add_used_map+0x5bc/0x920 [ 112.456508][ T6108] ? fput+0x91/0xc0 [ 112.456531][ T6108] ? resolve_func_ptrs+0x6f5/0x7d0 [ 112.456584][ T6108] ? array_map_direct_value_addr+0x67/0x90 [ 112.456690][ T6108] ? check_and_resolve_insns+0x163f/0x1900 [ 112.456720][ T6108] bpf_check+0x1405/0x20e0 [ 112.456751][ T6108] bpf_prog_load+0xf52/0x10b0 [ 112.456787][ T6108] __sys_bpf+0xbce/0xc50 [ 112.456895][ T6108] ? do_futex+0x380/0x460 [ 112.457002][ T6108] __x64_sys_bpf+0x69/0x80 [ 112.457025][ T6108] x64_sys_call+0xf26/0x2550 [ 112.457055][ T6108] do_syscall_64+0x112/0x360 [ 112.457083][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.457166][ T6108] RIP: 0033:0x7f1057bbf559 [ 112.457186][ T6108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.457207][ T6108] RSP: 002b:00007f1056617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.457240][ T6108] RAX: ffffffffffffffda RBX: 00007f1057e45fa0 RCX: 00007f1057bbf559 [ 112.457257][ T6108] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 112.457274][ T6108] RBP: 00007f1057c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 112.457330][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.457346][ T6108] R13: 00007f1057e46038 R14: 00007f1057e45fa0 R15: 00007ffdaf5bd058 [ 112.457409][ T6108] [ 112.804855][ T6110] loop2: detected capacity change from 0 to 512 [ 112.885088][ T6110] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 112.900425][ T6110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.013794][ T6110] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.889: bad orphan inode 131072 [ 113.015034][ T6110] loop2: lost filesystem error report for type 5 error -117 [ 113.086877][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.209410][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.235421][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 113.235533][ T29] audit: type=1400 audit(1793441005.391:692): avc: denied { map } for pid=6138 comm="syz.2.901" path="socket:[15828]" dev="sockfs" ino=15828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 113.324271][ T6148] sd 0:0:1:0: PR command failed: 1026 [ 113.324325][ T6148] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 113.324399][ T6148] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 113.637620][ T6142] loop4: detected capacity change from 0 to 512 [ 113.670824][ T6161] loop1: detected capacity change from 0 to 8192 [ 113.728610][ T6142] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 113.729431][ T6142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.739210][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 113.775308][ T184] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.775424][ T184] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.775460][ T184] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.775508][ T184] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.841189][ T29] audit: type=1400 audit(1793441006.001:693): avc: denied { read } for pid=6167 comm="syz.2.909" path="socket:[15857]" dev="sockfs" ino=15857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.891854][ T6142] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.912: bad orphan inode 131072 [ 113.892397][ T6142] loop4: lost filesystem error report for type 5 error -117 [ 113.895648][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 113.895729][ C0] EXT4-fs (loop4): initial error at time 1793441006: ext4_orphan_get:1430 [ 113.895989][ C0] EXT4-fs (loop4): last error at time 1793441006: ext4_orphan_get:1430 [ 113.929254][ T6142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.033730][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.120240][ T6180] FAULT_INJECTION: forcing a failure. [ 114.120240][ T6180] name fail_futex, interval 1, probability 0, space 0, times 1 [ 114.120274][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.4.916 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.120316][ T6180] Tainted: [W]=WARN [ 114.120323][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.120336][ T6180] Call Trace: [ 114.120344][ T6180] [ 114.120354][ T6180] __dump_stack+0x1d/0x30 [ 114.120386][ T6180] dump_stack_lvl+0x95/0xd0 [ 114.120413][ T6180] dump_stack+0x15/0x1b [ 114.120481][ T6180] should_fail_ex+0x259/0x270 [ 114.120506][ T6180] should_fail+0xb/0x20 [ 114.120533][ T6180] get_futex_key+0x12c/0xc40 [ 114.120556][ T6180] ? __kmalloc_cache_noprof+0x17e/0x3e0 [ 114.120602][ T6180] ? __rcu_read_unlock+0x4e/0x70 [ 114.120627][ T6180] futex_wake+0x89/0x400 [ 114.120657][ T6180] ? mem_rw+0x441/0x4b0 [ 114.120684][ T6180] do_futex+0x3f8/0x460 [ 114.120712][ T6180] __se_sys_futex+0x2f6/0x370 [ 114.120806][ T6180] ? mutex_unlock+0x4e/0x90 [ 114.120856][ T6180] __x64_sys_futex+0x78/0x90 [ 114.120957][ T6180] x64_sys_call+0x22e2/0x2550 [ 114.121039][ T6180] do_syscall_64+0x112/0x360 [ 114.121077][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.121103][ T6180] RIP: 0033:0x7f30e7aef559 [ 114.121122][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.121152][ T6180] RSP: 002b:00007f30e65470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.121251][ T6180] RAX: ffffffffffffffda RBX: 00007f30e7d75fa8 RCX: 00007f30e7aef559 [ 114.121269][ T6180] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30e7d75fac [ 114.121286][ T6180] RBP: 00007f30e7d75fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 114.121304][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.121346][ T6180] R13: 00007f30e7d76038 R14: 00007ffe55cf0af0 R15: 00007ffe55cf0bd8 [ 114.121369][ T6180] [ 114.404103][ T6193] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.617306][ T6201] loop1: detected capacity change from 0 to 256 [ 114.848412][ T29] audit: type=1400 audit(1793441007.011:694): avc: denied { map } for pid=6204 comm="syz.2.928" path="socket:[15898]" dev="sockfs" ino=15898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.848479][ T29] audit: type=1400 audit(1793441007.011:695): avc: denied { read } for pid=6204 comm="syz.2.928" path="socket:[15898]" dev="sockfs" ino=15898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.885610][ T6199] loop3: detected capacity change from 0 to 1024 [ 114.925703][ T6199] EXT4-fs: Ignoring removed bh option [ 114.953043][ T6199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.965937][ T29] audit: type=1400 audit(1793441007.121:696): avc: denied { write } for pid=6198 comm="syz.3.925" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.972021][ T6199] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 115.007612][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.054759][ T6215] FAULT_INJECTION: forcing a failure. [ 115.054759][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 115.054861][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.3.931 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 115.054897][ T6215] Tainted: [W]=WARN [ 115.054905][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.054919][ T6215] Call Trace: [ 115.054927][ T6215] [ 115.054936][ T6215] __dump_stack+0x1d/0x30 [ 115.055035][ T6215] dump_stack_lvl+0x95/0xd0 [ 115.055061][ T6215] dump_stack+0x15/0x1b [ 115.055083][ T6215] should_fail_ex+0x259/0x270 [ 115.055117][ T6215] ? alloc_mnt_ns+0x75/0x250 [ 115.055141][ T6215] should_failslab+0x8c/0xb0 [ 115.055239][ T6215] __kmalloc_cache_noprof+0x5d/0x3e0 [ 115.055273][ T6215] ? alloc_mnt_ns+0x75/0x250 [ 115.055345][ T6215] alloc_mnt_ns+0x75/0x250 [ 115.055368][ T6215] copy_mnt_ns+0x13b/0x720 [ 115.055391][ T6215] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 115.055424][ T6215] ? create_new_namespaces+0x38/0x420 [ 115.055514][ T6215] create_new_namespaces+0x7f/0x420 [ 115.055542][ T6215] unshare_nsproxy_namespaces+0x115/0x150 [ 115.055570][ T6215] ksys_unshare+0x3a3/0x690 [ 115.055720][ T6215] __x64_sys_unshare+0x1f/0x30 [ 115.055750][ T6215] x64_sys_call+0x1e33/0x2550 [ 115.055777][ T6215] do_syscall_64+0x112/0x360 [ 115.055886][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.055911][ T6215] RIP: 0033:0x7f1057bbf559 [ 115.055931][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.055950][ T6215] RSP: 002b:00007f1056617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.056053][ T6215] RAX: ffffffffffffffda RBX: 00007f1057e45fa0 RCX: 00007f1057bbf559 [ 115.056126][ T6215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 115.056142][ T6215] RBP: 00007f1057c56b50 R08: 0000000000000000 R09: 0000000000000000 [ 115.056157][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.056173][ T6215] R13: 00007f1057e46038 R14: 00007f1057e45fa0 R15: 00007ffdaf5bd058 [ 115.056217][ T6215] [ 115.162105][ T29] audit: type=1400 audit(1793441007.331:697): avc: denied { kexec_image_load } for pid=6212 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 115.275299][ T6227] FAULT_INJECTION: forcing a failure. [ 115.275299][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 115.275331][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.2.937 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 115.275365][ T6227] Tainted: [W]=WARN [ 115.275372][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.275385][ T6227] Call Trace: [ 115.275393][ T6227] [ 115.275402][ T6227] __dump_stack+0x1d/0x30 [ 115.275487][ T6227] dump_stack_lvl+0x95/0xd0 [ 115.275511][ T6227] dump_stack+0x15/0x1b [ 115.275532][ T6227] should_fail_ex+0x259/0x270 [ 115.275654][ T6227] ? x509_cert_parse+0x1fd/0x450 [ 115.275691][ T6227] should_failslab+0x8c/0xb0 [ 115.275781][ T6227] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 115.275815][ T6227] ? x509_cert_parse+0x1fd/0x450 [ 115.275902][ T6227] kmemdup_noprof+0x2b/0x70 [ 115.275924][ T6227] x509_cert_parse+0x1fd/0x450 [ 115.276028][ T6227] x509_key_preparse+0x3c/0x420 [ 115.276049][ T6227] ? selinux_key_permission+0x161/0x190 [ 115.276081][ T6227] asymmetric_key_preparse+0x68/0xb0 [ 115.276163][ T6227] __key_create_or_update+0x29e/0x820 [ 115.276191][ T6227] ? key_task_permission+0x2ac/0x2c0 [ 115.276232][ T6227] key_create_or_update+0x42/0x60 [ 115.276261][ T6227] __se_sys_add_key+0x2a5/0x360 [ 115.276284][ T6227] __x64_sys_add_key+0x67/0x80 [ 115.276305][ T6227] x64_sys_call+0x1fa9/0x2550 [ 115.276338][ T6227] do_syscall_64+0x112/0x360 [ 115.276370][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.276393][ T6227] RIP: 0033:0x7f69ed8cf559 [ 115.276416][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.276436][ T6227] RSP: 002b:00007f69ec327028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 115.276458][ T6227] RAX: ffffffffffffffda RBX: 00007f69edb55fa0 RCX: 00007f69ed8cf559 [ 115.276474][ T6227] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 115.276569][ T6227] RBP: 00007f69ed966b50 R08: ffffffffffffffff R09: 0000000000000000 [ 115.276583][ T6227] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 115.276608][ T6227] R13: 00007f69edb56038 R14: 00007f69edb55fa0 R15: 00007ffcb1bf9b78 [ 115.276628][ T6227] [ 115.392096][ T6233] netlink: 'syz.4.941': attribute type 4 has an invalid length. [ 115.621856][ T29] audit: type=1400 audit(1793441007.771:698): avc: denied { read write } for pid=6241 comm="syz.4.946" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.628290][ T29] audit: type=1400 audit(1793441007.781:699): avc: denied { open } for pid=6241 comm="syz.4.946" path="/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 115.727726][ T6256] loop2: detected capacity change from 0 to 128 [ 115.749245][ T6258] FAULT_INJECTION: forcing a failure. [ 115.749245][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 115.749277][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.0.950 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 115.749309][ T6258] Tainted: [W]=WARN [ 115.749316][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.749341][ T6258] Call Trace: [ 115.749350][ T6258] [ 115.749358][ T6258] __dump_stack+0x1d/0x30 [ 115.749385][ T6258] dump_stack_lvl+0x95/0xd0 [ 115.749433][ T6258] dump_stack+0x15/0x1b [ 115.749518][ T6258] should_fail_ex+0x259/0x270 [ 115.749549][ T6258] ? __request_module+0x1c4/0x3c0 [ 115.749641][ T6258] should_failslab+0x8c/0xb0 [ 115.749674][ T6258] __kmalloc_cache_noprof+0x5d/0x3e0 [ 115.749767][ T6258] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 115.749789][ T6258] ? __request_module+0x1c4/0x3c0 [ 115.749833][ T6258] ? inet6_create+0x1ea/0x860 [ 115.749931][ T6258] __request_module+0x1c4/0x3c0 [ 115.749969][ T6258] inet6_create+0x1ea/0x860 [ 115.750028][ T6258] __sock_create+0x2e5/0x580 [ 115.750127][ T6258] __sys_socket+0xaf/0x180 [ 115.750222][ T6258] __x64_sys_socket+0x3f/0x50 [ 115.750253][ T6258] x64_sys_call+0x246e/0x2550 [ 115.750324][ T6258] do_syscall_64+0x112/0x360 [ 115.750409][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.750429][ T6258] RIP: 0033:0x7f6080adf559 [ 115.750446][ T6258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.750467][ T6258] RSP: 002b:00007f607f52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.750494][ T6258] RAX: ffffffffffffffda RBX: 00007f6080d65fa0 RCX: 00007f6080adf559 [ 115.750549][ T6258] RDX: 0000000000000106 RSI: 0000000000000002 RDI: 000000000000000a [ 115.750562][ T6258] RBP: 00007f6080b76b50 R08: 0000000000000000 R09: 0000000000000000 [ 115.750652][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.750669][ T6258] R13: 00007f6080d66038 R14: 00007f6080d65fa0 R15: 00007ffd3b995ce8 [ 115.750692][ T6258] [ 115.966552][ T6248] loop4: detected capacity change from 0 to 128 [ 116.056501][ T6270] FAULT_INJECTION: forcing a failure. [ 116.056501][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 116.056588][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.0.954 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 116.056688][ T6270] Tainted: [W]=WARN [ 116.056697][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.056710][ T6270] Call Trace: [ 116.056718][ T6270] [ 116.056727][ T6270] __dump_stack+0x1d/0x30 [ 116.056757][ T6270] dump_stack_lvl+0x95/0xd0 [ 116.056814][ T6270] dump_stack+0x15/0x1b [ 116.056837][ T6270] should_fail_ex+0x259/0x270 [ 116.056867][ T6270] ? __addrconf_sysctl_register+0x60/0x340 [ 116.056950][ T6270] should_failslab+0x8c/0xb0 [ 116.056985][ T6270] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 116.057021][ T6270] ? _raw_spin_unlock+0x9/0x30 [ 116.057050][ T6270] ? __register_sysctl_table+0xbbe/0xbe0 [ 116.057076][ T6270] ? __addrconf_sysctl_register+0x60/0x340 [ 116.057112][ T6270] kmemdup_noprof+0x2b/0x70 [ 116.057184][ T6270] __addrconf_sysctl_register+0x60/0x340 [ 116.057221][ T6270] ? neigh_sysctl_register+0x682/0x6d0 [ 116.057255][ T6270] ? proc_create_single_data+0xfb/0x140 [ 116.057361][ T6270] addrconf_sysctl_register+0xe6/0x130 [ 116.057416][ T6270] ipv6_add_dev+0x8f9/0xb20 [ 116.057445][ T6270] addrconf_notify+0x3ad/0x8e0 [ 116.057480][ T6270] ? __pfx_addrconf_notify+0x10/0x10 [ 116.057526][ T6270] raw_notifier_call_chain+0x72/0x1a0 [ 116.057564][ T6270] ? blake2s_update+0x12b/0x150 [ 116.057615][ T6270] call_netdevice_notifiers+0xb5/0x110 [ 116.057645][ T6270] register_netdevice+0x122d/0x13f0 [ 116.057680][ T6270] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 116.057749][ T6270] batadv_meshif_newlink+0x7d/0x90 [ 116.057809][ T6270] rtnl_newlink_create+0x1e4/0x4a0 [ 116.057842][ T6270] ? security_capable+0x7b/0x90 [ 116.057895][ T6270] ? netlink_ns_capable+0x86/0xa0 [ 116.057929][ T6270] rtnl_newlink+0x1255/0x1510 [ 116.057968][ T6270] ? __css_rstat_updated+0xbb/0x280 [ 116.058000][ T6270] ? try_charge_memcg+0x284/0xb30 [ 116.058068][ T6270] ? __memcg_slab_free_hook+0x154/0x340 [ 116.058096][ T6270] ? __rcu_read_unlock+0x4e/0x70 [ 116.058119][ T6270] ? avc_has_perm_noaudit+0xac/0x160 [ 116.058215][ T6270] ? cred_has_capability+0x224/0x2a0 [ 116.058242][ T6270] ? selinux_capable+0x31/0x40 [ 116.058370][ T6270] ? security_capable+0x7b/0x90 [ 116.058394][ T6270] ? ns_capable+0x80/0xb0 [ 116.058420][ T6270] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.058450][ T6270] rtnetlink_rcv_msg+0x64b/0x720 [ 116.058525][ T6270] ? __copy_skb_header+0x22f/0x2b0 [ 116.058565][ T6270] netlink_rcv_skb+0x11e/0x220 [ 116.058655][ T6270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.058688][ T6270] rtnetlink_rcv+0x1c/0x30 [ 116.058715][ T6270] netlink_unicast+0x665/0x740 [ 116.058786][ T6270] netlink_sendmsg+0x5ef/0x740 [ 116.058811][ T6270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.058834][ T6270] ____sys_sendmsg+0x54a/0x590 [ 116.058897][ T6270] ___sys_sendmsg+0x195/0x1e0 [ 116.058950][ T6270] __x64_sys_sendmsg+0xd4/0x160 [ 116.058976][ T6270] x64_sys_call+0x22ab/0x2550 [ 116.059026][ T6270] do_syscall_64+0x112/0x360 [ 116.059055][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.059077][ T6270] RIP: 0033:0x7f6080adf559 [ 116.059097][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.059118][ T6270] RSP: 002b:00007f607f52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.059150][ T6270] RAX: ffffffffffffffda RBX: 00007f6080d65fa0 RCX: 00007f6080adf559 [ 116.059167][ T6270] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 116.059183][ T6270] RBP: 00007f6080b76b50 R08: 0000000000000000 R09: 0000000000000000 [ 116.059199][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.059212][ T6270] R13: 00007f6080d66038 R14: 00007f6080d65fa0 R15: 00007ffd3b995ce8 [ 116.059312][ T6270] [ 116.156732][ T6248] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.162007][ T6248] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.286196][ T6275] loop2: detected capacity change from 0 to 7 [ 116.287629][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.288416][ T6275] loop2: [ 116.524901][ T6291] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 116.540406][ T6291] bond5: entered promiscuous mode [ 116.542087][ T6291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.604407][ T6291] vlan3: entered allmulticast mode [ 116.606038][ T6291] bond5: entered allmulticast mode [ 116.614577][ T6291] bond5: (slave bridge1): making interface the new active one [ 116.614602][ T6291] bridge1: entered promiscuous mode [ 116.614762][ T6291] bridge1: entered allmulticast mode [ 116.651018][ T6291] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 117.120246][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.120404][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.691594][ T29] audit: type=1400 audit(1793441009.851:700): avc: denied { mount } for pid=6332 comm="syz.4.978" name="/" dev="rpc_pipefs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 117.731160][ T29] audit: type=1400 audit(1793441009.891:701): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 117.819299][ T6317] loop1: detected capacity change from 0 to 512 [ 117.983890][ T107] IPVS: starting estimator thread 0... [ 117.984062][ T6354] IPVS: nq: FWM 3 0x00000003 - no destination available [ 118.065174][ T6355] IPVS: using max 2592 ests per chain, 129600 per kthread [ 118.505431][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 118.505447][ T29] audit: type=1400 audit(1793441010.671:703): avc: denied { write } for pid=6367 comm="syz.2.991" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.509752][ T6368] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 118.509770][ T6368] __nla_validate_parse: 4 callbacks suppressed [ 118.509788][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.992'. [ 118.509859][ T6368] batadv0: entered promiscuous mode [ 118.509940][ T6368] batadv0: entered allmulticast mode [ 118.510580][ T6368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.510937][ T6368] bridge0: port 3(batadv0) entered blocking state [ 118.510968][ T6368] bridge0: port 3(batadv0) entered disabled state [ 118.516429][ T6368] bridge0: port 3(batadv0) entered blocking state [ 118.516465][ T6368] bridge0: port 3(batadv0) entered forwarding state [ 118.626694][ T6317] bio_check_eod: 746 callbacks suppressed [ 118.626768][ T6317] syz.1.971: attempt to access beyond end of device [ 118.626768][ T6317] loop1: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 118.670543][ T6317] syz.1.971: attempt to access beyond end of device [ 118.670543][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.670598][ T6317] syz.1.971: attempt to access beyond end of device [ 118.670598][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.673560][ T6317] syz.1.971: attempt to access beyond end of device [ 118.673560][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.721536][ T6317] syz.1.971: attempt to access beyond end of device [ 118.721536][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.754965][ T6317] syz.1.971: attempt to access beyond end of device [ 118.754965][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.755570][ T6317] syz.1.971: attempt to access beyond end of device [ 118.755570][ T6317] loop1: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 118.775357][ T6381] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.790220][ T6382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.996'. [ 118.803367][ T6382] syzkaller1: entered promiscuous mode [ 118.803426][ T6382] syzkaller1: entered allmulticast mode [ 118.878636][ T6375] netlink: 602 bytes leftover after parsing attributes in process `syz.0.1004'. [ 118.908909][ T184] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 118.908927][ T184] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 118.961363][ T29] audit: type=1400 audit(1793441011.121:704): avc: denied { name_bind } for pid=6385 comm="syz.0.998" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 118.963174][ T6387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.981256][ T6389] tipc: Started in network mode [ 118.981286][ T6389] tipc: Node identity d616907f0a85, cluster identity 4711 [ 118.981480][ T6389] tipc: Enabled bearer , priority 0 [ 119.034154][ T6389] syzkaller0: entered promiscuous mode [ 119.034196][ T6389] syzkaller0: entered allmulticast mode [ 119.034880][ T6389] tipc: Resetting bearer [ 119.867658][ T6392] Driver unsupported XDP return value 0 on prog (id 192) dev N/A, expect packet loss! [ 119.868538][ T6388] tipc: Resetting bearer [ 119.914984][ T6388] tipc: Disabling bearer [ 119.927692][ T6407] loop1: detected capacity change from 0 to 512 [ 119.939335][ T6407] vfat: Unknown parameter 'ÿÿÿ01777777777777777777777' [ 120.175741][ T6422] loop1: detected capacity change from 0 to 8192 [ 120.179748][ T29] audit: type=1400 audit(1793441012.341:705): avc: denied { mounton } for pid=6421 comm="syz.1.1010" path="/179/file1/file0" dev="loop1" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 120.180203][ T29] audit: type=1400 audit(1793441012.341:706): avc: denied { mounton } for pid=6421 comm="syz.1.1010" path="/179/file1/file1" dev="loop1" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 120.234341][ T6425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1012'. [ 120.314214][ T29] audit: type=1400 audit(1793441012.471:707): avc: denied { write } for pid=6428 comm="syz.1.1014" name="md0" dev="tmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.326159][ T6431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.326177][ T6431] block device autoloading is deprecated and will be removed. [ 120.399544][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 120.675507][ T29] audit: type=1400 audit(1793441012.841:708): avc: denied { mount } for pid=6436 comm="syz.3.1018" name="/" dev="9p" ino=18014398509481986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.721646][ T29] audit: type=1400 audit(1793441012.881:709): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.854235][ T6442] loop2: detected capacity change from 0 to 8192 [ 121.034152][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.034284][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.148127][ T6456] loop4: detected capacity change from 0 to 512 [ 121.162461][ T6456] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 121.275026][ T29] audit: type=1326 audit(1793441013.431:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.1.1030" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 121.277471][ T29] audit: type=1326 audit(1793441013.441:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.1.1030" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 121.277576][ T29] audit: type=1326 audit(1793441013.441:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.1.1030" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd39f559 code=0x7ffc0000 [ 121.529539][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 121.529586][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 121.529625][ T6475] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 121.532450][ T6461] loop4: detected capacity change from 0 to 512 [ 121.647678][ T6461] EXT4-fs: Ignoring removed bh option [ 121.963724][ T6492] loop2: detected capacity change from 0 to 512 [ 121.980369][ T6492] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 121.980437][ T6492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.991309][ T6492] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #16: comm syz.2.1039: invalid indirect mapped block 32768 (level 2) [ 121.991346][ T6492] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 121.991746][ T6492] EXT4-fs (loop2): 1 orphan inode deleted [ 121.991764][ T6492] EXT4-fs (loop2): 1 truncate cleaned up [ 121.992185][ T6492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.058817][ T6498] loop1: detected capacity change from 0 to 128 [ 122.077428][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.093512][ T6498] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.094364][ T6498] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.365228][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.385282][ T6502] loop2: detected capacity change from 0 to 128 [ 122.424942][ T6461] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.523943][ T6502] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.546118][ T6502] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.642865][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.695759][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.716454][ T6506] bridge0: port 3(batadv0) entered disabled state [ 122.736928][ T6506] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 122.771385][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.839122][ T6514] device-mapper: table: 252:0: linear: Device lookup failed (-ENOENT) [ 122.839143][ T6514] device-mapper: ioctl: error adding target to table [ 123.211955][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b23a400: rx timeout, send abort [ 123.212064][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b23a400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 123.510038][ T6542] loop4: detected capacity change from 0 to 512 [ 123.560816][ T6543] loop3: detected capacity change from 0 to 128 [ 123.590653][ T6543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.591359][ T6542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.591456][ T6542] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.593120][ T6543] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.722058][ T6548] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1056'. [ 123.831743][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.959940][ T6559] ref_ctr increment failed for inode: 0x4fb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881041dc380 [ 123.960082][ T6558] uprobe: syz.0.1060:6558 failed to unregister, leaking uprobe [ 124.197705][ T6569] tipc: Can't bind to reserved service type 1 [ 124.234877][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 124.234896][ T29] audit: type=1400 audit(1793441016.391:753): avc: denied { mounton } for pid=6566 comm="syz.4.1063" path="/file0" dev="ramfs" ino=16222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 124.328469][ T3293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.466155][ T6579] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 124.469839][ T6579] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 124.978655][ T29] audit: type=1400 audit(1793441017.101:754): avc: denied { ioctl } for pid=6587 comm="syz.1.1070" path="socket:[17004]" dev="sockfs" ino=17004 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.223067][ T6508] loop2: detected capacity change from 0 to 4096 [ 125.280793][ T6508] EXT4-fs: Ignoring removed orlov option [ 125.318208][ T6508] EXT4-fs (loop2): invalid #clusters per group: 32768 [ 125.440948][ T6596] loop1: detected capacity change from 0 to 512 [ 125.470359][ T6596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.470447][ T6596] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.547064][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.190170][ T6637] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.967748][ T6651] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.971799][ T6659] loop3: detected capacity change from 0 to 512 [ 128.004749][ T6659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.004884][ T6659] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.087607][ T29] audit: type=1400 audit(1793441020.251:755): avc: denied { write } for pid=6645 comm="syz.3.1092" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.310577][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.476856][ T29] audit: type=1400 audit(1793441020.641:756): avc: denied { create } for pid=6669 comm="syz.3.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 128.592920][ T6678] ip_tables: iptables: counters copy to user failed while replacing table [ 128.593413][ T6620] loop4: detected capacity change from 0 to 512 [ 128.913769][ T29] audit: type=1400 audit(1793441021.061:757): avc: denied { getopt } for pid=6684 comm="syz.1.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.963894][ T6694] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1108'. [ 129.082188][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 129.082227][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 129.082245][ T6701] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1110'. [ 129.246687][ T6716] ip_tables: iptables: counters copy to user failed while replacing table [ 129.325212][ T6711] loop1: detected capacity change from 0 to 128 [ 129.373044][ T6720] FAULT_INJECTION: forcing a failure. [ 129.373044][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 129.373081][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.2.1117 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 129.373122][ T6720] Tainted: [W]=WARN [ 129.373130][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.373145][ T6720] Call Trace: [ 129.373152][ T6720] [ 129.373206][ T6720] __dump_stack+0x1d/0x30 [ 129.373235][ T6720] dump_stack_lvl+0x95/0xd0 [ 129.373261][ T6720] dump_stack+0x15/0x1b [ 129.373285][ T6720] should_fail_ex+0x259/0x270 [ 129.373391][ T6720] should_failslab+0x8c/0xb0 [ 129.373465][ T6720] __kvmalloc_node_noprof+0x14f/0x5b0 [ 129.373503][ T6720] ? nf_hook_entries_grow+0x1cb/0x460 [ 129.373569][ T6720] ? nf_hook_entries_grow+0x1cb/0x460 [ 129.373597][ T6720] nf_hook_entries_grow+0x1cb/0x460 [ 129.373624][ T6720] ? __pfx___nf_hook_entries_free+0x10/0x10 [ 129.373657][ T6720] __nf_register_net_hook+0x16e/0x4d0 [ 129.373742][ T6720] nf_register_net_hook+0x88/0x130 [ 129.373796][ T6720] nf_register_net_hooks+0x44/0x150 [ 129.373823][ T6720] xt_register_table+0x3aa/0x530 [ 129.373905][ T6720] ip6t_register_table+0xd9/0x180 [ 129.373932][ T6720] ip6table_mangle_table_init+0x4d/0x70 [ 129.373967][ T6720] xt_find_table_lock+0x1a5/0x2c0 [ 129.373994][ T6720] do_ip6t_get_ctl+0x540/0xcb0 [ 129.374018][ T6720] ? should_fail_ex+0xdb/0x270 [ 129.374101][ T6720] ? __rb_insert_augmented+0x2ae/0x2c0 [ 129.374137][ T6720] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 129.374195][ T6720] ? hrtimer_active+0xe7/0x110 [ 129.374226][ T6720] nf_getsockopt+0x190/0x1b0 [ 129.374380][ T6720] ipv6_getsockopt+0x170/0x1e0 [ 129.374401][ T6720] udpv6_getsockopt+0xa5/0x230 [ 129.374427][ T6720] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 129.374463][ T6720] sock_common_getsockopt+0x60/0x70 [ 129.374494][ T6720] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 129.374585][ T6720] do_sock_getsockopt+0x2ce/0x350 [ 129.374622][ T6720] __x64_sys_getsockopt+0x11d/0x1a0 [ 129.374730][ T6720] x64_sys_call+0x1032/0x2550 [ 129.374759][ T6720] do_syscall_64+0x112/0x360 [ 129.374845][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.374866][ T6720] RIP: 0033:0x7f69ed8cf559 [ 129.374884][ T6720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.374905][ T6720] RSP: 002b:00007f69ec327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 129.374931][ T6720] RAX: ffffffffffffffda RBX: 00007f69edb55fa0 RCX: 00007f69ed8cf559 [ 129.374979][ T6720] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000006 [ 129.374996][ T6720] RBP: 00007f69ed966b50 R08: 0000200000000f80 R09: 0000000000000000 [ 129.375012][ T6720] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 129.375027][ T6720] R13: 00007f69edb56038 R14: 00007f69edb55fa0 R15: 00007ffcb1bf9b78 [ 129.375051][ T6720] [ 129.422769][ T6711] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.477779][ T6711] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.538105][ T6728] loop4: detected capacity change from 0 to 512 [ 129.575070][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.716192][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.775994][ T6737] syz_tun: entered allmulticast mode [ 129.857848][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 129.859358][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 129.859497][ T6726] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 129.893418][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.922432][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 129.959014][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 130.165893][ T6758] loop3: detected capacity change from 0 to 512 [ 130.188925][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.188925][ T6758] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 130.189170][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189170][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189219][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189219][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189348][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189348][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189488][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189488][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189607][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189607][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189651][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189651][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189733][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189733][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189847][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189847][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.189894][ T6758] syz.3.1131: attempt to access beyond end of device [ 130.189894][ T6758] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 130.345051][ T29] audit: type=1400 audit(1793441022.351:758): avc: denied { read write } for pid=6751 comm="syz.1.1132" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.361152][ T29] audit: type=1400 audit(1793441022.511:759): avc: denied { open } for pid=6751 comm="syz.1.1132" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.699279][ T6764] loop1: detected capacity change from 0 to 164 [ 130.893547][ T6764] iso9660: Bad value for 'check' [ 131.291192][ T6778] loop1: detected capacity change from 0 to 512 [ 131.307938][ T6778] EXT4-fs: Ignoring removed bh option [ 131.327202][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.327604][ T6778] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.333484][ T29] audit: type=1400 audit(1793441023.491:760): avc: denied { write } for pid=6777 comm="syz.1.1141" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.389502][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.802519][ T6821] loop1: detected capacity change from 0 to 1024 [ 133.829161][ T6821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.852382][ T29] audit: type=1400 audit(1793441026.011:761): avc: denied { write } for pid=6820 comm="syz.1.1156" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.109620][ T6801] loop3: detected capacity change from 0 to 512 [ 134.247766][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 134.618969][ T6849] loop4: detected capacity change from 0 to 1024 [ 134.626218][ T29] audit: type=1400 audit(1793441026.781:762): avc: denied { mounton } for pid=6848 comm="syz.4.1164" path="/230/file0" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.660417][ T6849] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 134.662657][ T6849] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 134.663110][ T6849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.698357][ T6849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.896561][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.282768][ T29] audit: type=1400 audit(1793441027.441:763): avc: denied { watch watch_reads } for pid=6878 comm="syz.4.1177" path="/proc/585" dev="proc" ino=18597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 135.591011][ T6889] loop4: detected capacity change from 0 to 512 [ 135.640661][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.640898][ T6889] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.651266][ T29] audit: type=1400 audit(1793441027.811:764): avc: denied { write } for pid=6888 comm="syz.4.1180" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.651298][ T29] audit: type=1400 audit(1793441027.811:765): avc: denied { unlink } for pid=6888 comm="syz.4.1180" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.737122][ T6889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.802212][ T6895] loop4: detected capacity change from 0 to 1024 [ 135.844129][ T6895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.852944][ T29] audit: type=1400 audit(1793441028.011:766): avc: denied { write } for pid=6894 comm="syz.4.1182" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.365231][ T6877] loop2: detected capacity change from 0 to 1024 [ 136.401400][ T6865] loop1: detected capacity change from 0 to 1024 [ 136.488794][ T6865] EXT4-fs: Ignoring removed i_version option [ 136.515773][ T6865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.552056][ T6865] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.682424][ T6865] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.688212][ T6865] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.772626][ T6865] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.1171: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.779018][ T6865] loop1: lost filesystem error report for type 5 error -117 [ 136.788958][ T6865] EXT4-fs (loop1): Remounting filesystem read-only [ 136.795117][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 136.795142][ C0] EXT4-fs (loop1): initial error at time 1793441028: ext4_free_blocks:6717 [ 136.795163][ C0] EXT4-fs (loop1): last error at time 1793441028: ext4_free_blocks:6717 [ 136.805834][ T6865] EXT4-fs (loop1): 1 orphan inode deleted [ 136.990082][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.000998][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.091252][ T6920] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 137.091285][ T6920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 137.091401][ T6920] vhci_hcd vhci_hcd.0: Device attached [ 137.108289][ T6921] vhci_hcd: connection closed [ 137.108485][ T32] vhci_hcd vhci_hcd.3: stop threads [ 137.108505][ T32] vhci_hcd vhci_hcd.3: release socket [ 137.108597][ T32] vhci_hcd vhci_hcd.3: disconnect device [ 137.114091][ T29] audit: type=1400 audit(1793441029.271:767): avc: denied { getopt } for pid=6917 comm="syz.4.1188" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.274816][ T6877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.343550][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.362354][ T6877] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.503154][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.521522][ T6934] TC_ACT_REPEAT abuse ? [ 137.530060][ T6931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1192'. [ 137.574071][ T6945] FAULT_INJECTION: forcing a failure. [ 137.574071][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 137.574108][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.1.1199 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 137.574215][ T6945] Tainted: [W]=WARN [ 137.574223][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.574237][ T6945] Call Trace: [ 137.574244][ T6945] [ 137.574290][ T6945] __dump_stack+0x1d/0x30 [ 137.574321][ T6945] dump_stack_lvl+0x95/0xd0 [ 137.574347][ T6945] dump_stack+0x15/0x1b [ 137.574393][ T6945] should_fail_ex+0x259/0x270 [ 137.574444][ T6945] should_failslab+0x8c/0xb0 [ 137.574482][ T6945] __kvmalloc_node_noprof+0x14f/0x5b0 [ 137.574521][ T6945] ? nf_hook_entries_grow+0x1cb/0x460 [ 137.574547][ T6945] ? nf_hook_entries_grow+0x1cb/0x460 [ 137.574635][ T6945] nf_hook_entries_grow+0x1cb/0x460 [ 137.574664][ T6945] __nf_register_net_hook+0x16e/0x4d0 [ 137.574693][ T6945] nf_register_net_hook+0x88/0x130 [ 137.574719][ T6945] nf_register_net_hooks+0x44/0x150 [ 137.574760][ T6945] nf_defrag_ipv4_enable+0x6e/0xc0 [ 137.574784][ T6945] nf_ct_netns_do_get+0x13c/0x3a0 [ 137.574813][ T6945] nf_ct_netns_get+0xf1/0x2c0 [ 137.574858][ T6945] synproxy_tg4_check+0xca/0x160 [ 137.574894][ T6945] xt_check_target+0x3c2/0x5d0 [ 137.574928][ T6945] ? mutex_unlock+0x4e/0x90 [ 137.574995][ T6945] ? xt_find_target+0x204/0x240 [ 137.575050][ T6945] translate_table+0xd32/0x1120 [ 137.575085][ T6945] do_ipt_set_ctl+0x735/0x970 [ 137.575113][ T6945] ? _raw_spin_lock_bh+0x57/0xb0 [ 137.575140][ T6945] nf_setsockopt+0x199/0x1b0 [ 137.575250][ T6945] ip_setsockopt+0x102/0x110 [ 137.575279][ T6945] tcp_setsockopt+0x98/0xb0 [ 137.575311][ T6945] sock_common_setsockopt+0x69/0x80 [ 137.575340][ T6945] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 137.575437][ T6945] __sys_setsockopt+0x184/0x200 [ 137.575475][ T6945] __x64_sys_setsockopt+0x64/0x80 [ 137.575555][ T6945] x64_sys_call+0x248f/0x2550 [ 137.575587][ T6945] do_syscall_64+0x112/0x360 [ 137.575701][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.575805][ T6945] RIP: 0033:0x7f0cbd39f559 [ 137.575825][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.575843][ T6945] RSP: 002b:00007f0cbbdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.575864][ T6945] RAX: ffffffffffffffda RBX: 00007f0cbd625fa0 RCX: 00007f0cbd39f559 [ 137.575945][ T6945] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 137.575961][ T6945] RBP: 00007f0cbd436b50 R08: 00000000000002c0 R09: 0000000000000000 [ 137.575976][ T6945] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 137.575991][ T6945] R13: 00007f0cbd626038 R14: 00007f0cbd625fa0 R15: 00007ffcc533b978 [ 137.576012][ T6945] [ 137.582436][ T6947] loop2: detected capacity change from 0 to 512 [ 137.624733][ T6947] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 137.624749][ T6947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.630348][ T6947] EXT4-fs (loop2): 1 truncate cleaned up [ 137.630747][ T6947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.729203][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.780352][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 138.224999][ T6978] loop2: detected capacity change from 0 to 512 [ 138.256146][ T6978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.256352][ T6978] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.317849][ T29] audit: type=1400 audit(1793441030.481:768): avc: denied { write } for pid=6977 comm="syz.2.1211" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.476148][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.477650][ T6988] process 'syz.3.1216' launched './file1' with NULL argv: empty string added [ 138.480241][ T29] audit: type=1400 audit(1793441030.641:769): avc: denied { execute_no_trans } for pid=6987 comm="syz.3.1216" path="/252/file1" dev="tmpfs" ino=1344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.540287][ T6992] ip_tables: iptables: counters copy to user failed while replacing table [ 138.858199][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 139.327011][ T7014] loop3: detected capacity change from 0 to 512 [ 140.110842][ T7021] batman_adv: batadv0: Adding interface: syzkaller0 [ 140.110861][ T7021] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.110896][ T7021] batman_adv: batadv0: Interface activated: syzkaller0 [ 140.155808][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 140.158743][ T29] audit: type=1400 audit(1793441032.181:770): avc: denied { create } for pid=7011 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.358655][ T29] audit: type=1400 audit(1793441032.521:771): avc: denied { mounton } for pid=7033 comm="syz.1.1232" path="/file0" dev="autofs" ino=18835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 140.360517][ T29] audit: type=1400 audit(1793441032.521:772): avc: denied { remount } for pid=7033 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.434041][ T7020] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 140.443544][ T7020] batman_adv: batadv0: Removing interface: syzkaller0 [ 140.644733][ T7051] loop1: detected capacity change from 0 to 1024 [ 140.656479][ T7051] EXT4-fs: Ignoring removed nobh option [ 140.656536][ T7051] EXT4-fs: Ignoring removed bh option [ 140.687531][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.748126][ T7058] ip_tables: iptables: counters copy to user failed while replacing table [ 140.798135][ T7060] loop3: detected capacity change from 0 to 512 [ 140.800455][ T7060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.802877][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1242: iget: bad i_size value: 38620345925642 [ 140.802909][ T7060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.803081][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1242: couldn't read orphan inode 15 (err -117) [ 140.803107][ T7060] loop3: lost filesystem error report for type 5 error -117 [ 140.803875][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.817208][ T29] audit: type=1400 audit(1793441032.971:773): avc: denied { write } for pid=7059 comm="syz.3.1242" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.937670][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 140.937706][ T7066] netlink: 'syz.0.1244': attribute type 7 has an invalid length. [ 140.937720][ T7066] netlink: 'syz.0.1244': attribute type 8 has an invalid length. [ 140.937740][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 140.945374][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 140.945406][ T7066] netlink: 'syz.0.1244': attribute type 7 has an invalid length. [ 140.945419][ T7066] netlink: 'syz.0.1244': attribute type 8 has an invalid length. [ 140.945431][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 141.165075][ T7073] batman_adv: batadv0: Adding interface: syzkaller0 [ 141.166399][ T7073] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.166439][ T7073] batman_adv: batadv0: Interface activated: syzkaller0 [ 141.314913][ T7071] ================================================================== [ 141.314956][ T7071] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 141.315005][ T7071] [ 141.315011][ T7071] write to 0xffff88810b1e5b20 of 8 bytes by task 7068 on cpu 1: [ 141.315028][ T7071] shmem_file_splice_read+0x3eb/0x570 [ 141.315056][ T7071] splice_direct_to_actor+0x25d/0x680 [ 141.315086][ T7071] do_splice_direct+0x119/0x1a0 [ 141.315111][ T7071] do_sendfile+0x37d/0x640 [ 141.315135][ T7071] __x64_sys_sendfile64+0x105/0x150 [ 141.315157][ T7071] x64_sys_call+0x1015/0x2550 [ 141.315187][ T7071] do_syscall_64+0x112/0x360 [ 141.315225][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.315250][ T7071] [ 141.315256][ T7071] write to 0xffff88810b1e5b20 of 8 bytes by task 7071 on cpu 0: [ 141.315274][ T7071] shmem_file_splice_read+0x3eb/0x570 [ 141.315308][ T7071] splice_direct_to_actor+0x25d/0x680 [ 141.315331][ T7071] do_splice_direct+0x119/0x1a0 [ 141.315353][ T7071] do_sendfile+0x37d/0x640 [ 141.315375][ T7071] __x64_sys_sendfile64+0x105/0x150 [ 141.315398][ T7071] x64_sys_call+0x1015/0x2550 [ 141.315424][ T7071] do_syscall_64+0x112/0x360 [ 141.315453][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.315476][ T7071] [ 141.315481][ T7071] value changed: 0x000000000000250c -> 0x000000000000250d [ 141.315495][ T7071] [ 141.315500][ T7071] Reported by Kernel Concurrency Sanitizer on: [ 141.315516][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.0.1245 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 141.315550][ T7071] Tainted: [W]=WARN [ 141.315558][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.315572][ T7071] ================================================================== [ 141.333127][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.477315][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 141.526505][ T7072] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 141.530030][ T7072] batman_adv: batadv0: Removing interface: syzkaller0 [ 141.653239][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.